Error Running Ansible tasks on the active BIG-IP K10531487

You didn't mention the versions of Ansible and BIG-IP OS used in your environment. That information would be helpful for someone to reproduce and diagnose the issue you reported.

For example, using Ansible 2.4 and BIG-IP version 12.1.3, I get the following error about a missing

monitor_type

fatal: [bigip.localdomain -> localhost]: FAILED! => {"changed": false, "msg": "The 'monitor_type' parameter cannot be empty when 'monitors' parameter is specified."}

Once I added the

monitor_type

Try checking the bigip_pool.py module in your Ansible distribution for parameter requirements.

From the error and looking at the documentation my guess is the

validate_certs

yes

no

Guessing the

bigip_pool

True

False

On a side note I would look to use a

provider

Excellent point sir! TMOS 12.1.3.6 ansible 2.7.5 python version = 2.7.5 GCC 4.8.5 20150623 Red Hat 4.8.5-36

I added a monitor type and have the same error. I think it has something to do with the handler but could be wrong.

Using module_utils file /usr/lib/python2.7/site-packages/ansible/module_utils/network/common/__init__.py
`

Using module_utils file /usr/lib/python2.7/site-packages/ansible/module_utils/network/common/utils.py
Using module file /usr/lib/python2.7/site-packages/ansible/modules/network/f5/bigip_pool.py
 PUT /home/eh7305/.ansible/tmp/ansible-local-6428wf53d0/tmpYBaaD6 TO /home/eh7305/.ansible/tmp/ansible-tmp-1548950000.6-199856288208530/AnsiballZ_bigip_pool.py
 EXEC /bin/sh -c 'chmod u+x /home/eh7305/.ansible/tmp/ansible-tmp-1548950000.6-199856288208530/ /home/eh7305/.ansible/tmp/ansible-tmp-1548950000.6-199856288208530/AnsiballZ_bigip_pool.py && sleep 0'
 EXEC /bin/sh -c '/usr/bin/python2 /home/eh7305/.ansible/tmp/ansible-tmp-1548950000.6-199856288208530/AnsiballZ_bigip_pool.py && sleep 0'
 EXEC /bin/sh -c 'rm -f -r /home/eh7305/.ansible/tmp/ansible-tmp-1548950000.6-199856288208530/ > /dev/null 2>&1 && sleep 0'
The full traceback is:
WARNING: The below traceback may *not* be related to the actual failure.
  File "/tmp/ansible_bigip_pool_payload_etue6Y/__main__.py", line 947, in main
    results = mm.exec_module()
  File "/tmp/ansible_bigip_pool_payload_etue6Y/__main__.py", line 709, in exec_module
    changed = self.present()
  File "/tmp/ansible_bigip_pool_payload_etue6Y/__main__.py", line 757, in present
    if self.exists():
  File "/tmp/ansible_bigip_pool_payload_etue6Y/__main__.py", line 836, in exists
    return self.client.api.tm.ltm.pools.pool.exists(
  File "/tmp/ansible_bigip_pool_payload_etue6Y/ansible_bigip_pool_payload.zip/ansible/module_utils/network/f5/bigip.py", line 61, in api
    raise F5ModuleError(error)

fatal: [haf5b.express-scripts.com -> localhost]: FAILED! => {
    "changed": false,
    "invocation": {
        "module_args": {
            "auth_provider": null,
            "description": null,
            "lb_method": "round-robin",
            "metadata": null,
            "monitor_type": "single",
            "monitors": [
                "http"
            ],
            "name": "pool1",
            "partition": "Common",
            "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
            "priority_group_activation": null,
            "provider": {
                "auth_provider": null,
                "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
                "server": "f5bm.express-scripts.com",
                "server_port": null,
                "ssh_keyfile": null,
                "timeout": null,
                "transport": "rest",
                "user": "admin",
                "validate_certs": false
            },
            "quorum": null,
            "reselect_tries": null,
            "server": "f5bm.express-scripts.com",
            "server_port": null,
            "service_down_action": null,
            "slow_ramp_time": null,
            "state": "present",
            "transport": null,
            "user": "admin",
            "validate_certs": false
        }
    }
}

MSG:

Unable to connect to f5bm.express-scripts.com on port 443. The reported error was "Unexpected **kwargs: {'verify': False}".

`    to retry, use: --limit @/home/eh7305/scripts/ansible/f5tst.retry

PLAY RECAP *************************************************************************************************************************************************** f5am.express-scripts.com : ok=2 changed=0 unreachable=0 failed=0 f5bm.express-scripts.com : ok=2 changed=0 unreachable=0 failed=1

Give the following, or something similar a try. This uses a

provider

I remember I had an issue with one BIGIP module that didn't work correctly with the

provider

provider

Also another question question is what verion of the F5 Python SDK are you running?

- name: "Syncing F5 Active config to group"
  hosts: "drhaf5"
  serial: 1
  vars_files:
    - "vars/main.yml"
    - "vars/vault.yml"
  vars:
    f5Provider:
      server: "{{ inventory_hostname }}"
      server_port: 443
      user: admin
      password: "{{adminpass}}"
      validate_certs: no
      transport: rest
  gather_facts: "no"
  roles:
    - "f5syncactive"

  tasks:
    - name: "Get bigip facts"
      bigip_facts:
        provider: "{{f5Provider}}"
        include:
          - "device"
          - "system_info"
      check_mode: no
      delegate_to: "localhost"

    - name: "Display bigip facts {{inventory_hostname}}"
      debug:
        msg:
          - "Hostname: {{ system_info.system_information.host_name }}"
          - "Status: {{ device['/Common/' + system_info.system_information.host_name].failover_state }}"
    - name: "Create pool"
      bigip_pool:
        provider: "{{f5Provider}}"
        lb_method: "round-robin"
        monitors: http
        name: "pool1"
      notify:
        - "Save the running configuration to disk"
        - "Sync configuration from device to group"
      delegate_to: "localhost"
      when: device['/Common/' + system_info.system_information.host_name].failover_state == "HA_STATE_ACTIVE"

  handlers:
    - name: "Save the running {{inventory_hostname}} configuration to disk"
      bigip_config:
        save: "yes"
        provider: "{{f5Provider}}"
      delegate_to: localhost

    - name: "Handler Sync configuration from {{inventory_hostname}} to group"
      bigip_configsync_action:
        device_group: "sync-failover-group"
        sync_device_to_group: "yes"
        provider: "{{f5Provider}}"
      delegate_to: localhost

I found through testing that this was a software issue on the ansible host, causing instability in the various modules in the script. I moved to another server and virtual environment and the script worked flawlessly. Lesson learned, always build ansible F5 in a virtualenv!